Cisco ASA password-management (expiry) with clientless WebVPN

[will]

Does ASA support bringing up a password change dialog box for a user with _JUST_ clientless WebVPN session, via a browser? What is required for this? Do I have to configure some sort of custom change password webpage?

thx,

W

[Herbert Baerten]

Hi Will

you just need to enable "password-management" in the tunnel-group, e.g.:

tunnel-group myTG general-attributes

   authentication-server-group myLdap

   password-management  password-expire-in-days 30

This will cause the user to get prompted to enter a new password (after successful login) if his current password expires in the next 30 days.

hth

Herbert

[will]

hi, i verified this does work with webvpn (clientless)